MISP
/
mail_to_misp
mirror of https://github.com/MISP/mail_to_misp
2
0
Fork 0
Code Issues Releases Wiki Activity

identify forwarded messages

pull/4/head
Sascha Rommelfangen 2017-05-29 15:36:27 +02:00
parent 7946de1ca9
commit 6c63a88579
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
mail_to_misp_config.py-example
View File

@ -31,5 +31,8 @@ malwaretags = { 'locky': [ 'ecsirt:malicious-code="ransomware"', 'misp-galaxy
dependingtags = { 'tlp:white': [ 'circl:osint-feed' ]
}
# Known identifiers for forwarded messages
forward_identifiers = { b'-------- Forwarded Message --------', b'Begin forwarded message:' }
# Tags to add when hashes are found (e.g. to do automatic expansion)
hash_only_tags = { 'TODO:VT-ENRICHMENT' }